Mailinglist Archive: opensuse-security (343 mails)

< Previous Next >
Re: Strange Log Message
Hi

> Ah! Then those may be dns queries outgoing that you're blocking.
> The destination port would really be nice to have.

Well, these log messages are appearing on the screen after the
machine has been disconnected from the net. It's temporarily
connected to the net and the ISP with and ISDN connection. The
destination port is port 53 at 194.247.47.47 which is the ISP..

The latest one says ..........

output DENY ippp0 PROTO=17  xxx.xxx.xxx.xxx:61555  194.247.47.47:53
L=61 S=0x00 I=4974 F=0x4000  T=63 (#5)

The source of the data packet would seem to be the local machine. So
far it started at port 36552 earlier on and now it's at port 61555
and still going up.

Just can't understand where it's coming from on the local machine ?

Thanks


--
Richard

< Previous Next >
Follow Ups
References